478 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	c2999a4e13	A held module is no dependence of its neighbours: its hold stops spreading (issue 1126) ... novox's seed p-20261028t231141-ec84b4 refused 11 modules "what it composes of ..., held, is not what runs of them": de-spiegel's hold spread through mailu to postgres, nftables and route-proxy, and from postgres to every consumer, and gitea, held so, refused the node: "its credential of postgres-database is handed to the provisioner and the module is not: nothing would fill it". Three rounds each moved the error. The kind: a held module still took part in the composition as a dependence, so its hold spread. - The quick fix: let heldAsToday also follow dependsOnHeld's words, and skip the handed refusal for gitea. It moves the error once more and leaves every node's applying path holding consumers. - The thorough fix, chosen: a held module composes only as what runs of it. composeEach no longer compares the composition with each held module as its stub (dependsOnHeld removed): a consumer or collector composes against what runs of the held module like any other module, and a real difference is still a named difference in the answer, a module's own refusal still its refusal. A stub (compose.Stub, catalogue.Manifest.Stubbed) leaves the credentials and own secrets it would hand the provisioner out of its plan as they run, never refused for want of a plan. Only what a held module's new manifest says to others in their own files is still held behind it (dependents: the provider of what it contributes to, the filter where it listens), which heldAsToday already follows. Tests: rows added to existing tests (a held provider with a binding consumer, which the old code held in the seed's words; a held feeder of a collector; a held module with a handed credential and own secret). No new test function.	2026-10-29 00:49:00 +01:00
jschoubben	76f7c4d223	A stub keeps its items and their templates, so a held module still contributes to other modules' collections; it drops only the templates for its own files (issue 1126)	2026-10-28 23:56:33 +01:00
jschoubben	f609be7864	Keep as today what a node keeps today and what is held only behind it, saying how; a stub hands and collects nothing of its own (issue 1126)	2026-10-28 23:49:22 +01:00
mesh-tools	d747c1128e	Merge pull request 'L3: the vault mints bus accounts, the grants part and the node seat node-engine (issue 774, ADR 0561), rebased onto L2' (#126) from feat/774-vault-mints-sdk into main	2026-10-28 22:27:36 +00:00
jschoubben	77b48a4f1a	Name in the seed's brief the first differing field's value as it runs and as composed, so the operator sees what changes (issue 1126)	2026-10-28 22:26:05 +01:00
jschoubben	e84a121b8a	Let the seed carry the differences its nodes found, each named in its brief for the operator to approve knowingly; a refusal or silence still fails (issue 1126)	2026-10-28 22:24:57 +01:00
jschoubben	06b13ec1cc	Show in a proposal's brief what stays held as each node holds it today (issue 1126)	2026-10-28 22:17:57 +01:00
jschoubben	0830fcb25e	Hold that a refused module not held today keeps the answer refused (issue 1126)	2026-10-28 22:17:40 +01:00
jschoubben	b03bf4c118	A node's answer holds as today what it holds today, so a seed that reproduces today is the same (issue 1126)	2026-10-28 22:13:37 +01:00
mesh-tools	53f2649369	Merge pull request 'A build puller parked at capacity 0 wakes when its settings file changes, and retries a failed setting follow (issue 734's kind)' (#122) from fix/park-wakes into main	2026-10-28 21:03:13 +00:00
jschoubben	8eafc0c5ce	The placement reader names the seat mesh-placement's state, held by the assigner, as L2 moved it (issue 774, ADR 0567)	2026-10-28 21:54:04 +01:00
jschoubben	50de0a5a71	The node seat's acts reads one act by its id (issue 774, ADR 0563 §9)	2026-10-28 21:54:04 +01:00
jschoubben	2323ba19db	The node-engine's declared state acts: created by the grants part as a placed module's, its manifest placed on every node, and written by each node's engine under its own keys alone (issue 774, ADR 0563 §2, §3)	2026-10-28 21:54:04 +01:00
jschoubben	63607ba169	The vault's secret-ask is said to answer the callers its manifest names (issue 774, ADR 0563 §8)	2026-10-28 21:54:04 +01:00
jschoubben	82c54870ed	A module's trusted list of callers in the SDK, so the vault's secret-ask answers the callers its manifest names as the runtime proved them (issue 774, ADR 0563 §8)	2026-10-28 21:54:04 +01:00
jschoubben	79231a9e6c	A node's engine answers its own node's node-engine verbs, says the seat's events and asks the operator as node-engine-<node>, and no other account answers them (issue 774, ADR 0563 §1, §3, §6)	2026-10-28 21:54:04 +01:00
jschoubben	222d605f6f	The node seat node-engine: held by every node's engine, its six verbs and three events, and no module may claim it (issue 774, ADR 0563 §1)	2026-10-28 21:54:04 +01:00
jschoubben	3a8997c58a	Bundle the mesh's authorities by certificate, and check a node's certificate against every one a bundle holds (issue 774, ADR 0550 §2)	2026-10-28 21:54:04 +01:00
jschoubben	d6db3f38e6	The vault signs: the contract of its state signers, its verb sign and its event signed, a node's grants to ask it and to read what it trusts, and the authority composed as a bundle (issue 774, ADR 0550 §2)	2026-10-28 21:54:04 +01:00
jschoubben	18a47ac3c7	Placed: a module in the first revision heard of a node's key stands since before it, so the seed's placement does not leave out what already ran (issue 774)	2026-10-28 21:54:04 +01:00
jschoubben	1386219d4d	One reader of the catalogue's placement and the toolchain gate over it, in place of the three copies over the controller's assignments (issue 774, ADR 0549 §3, issue 1940); the assigner may read the lease (ADR 0549 §5)	2026-10-28 21:54:04 +01:00
jschoubben	10d4d2f845	Checker seat test: the try replaces both shell commands (issue 774)	2026-10-28 21:54:04 +01:00
jschoubben	b3100c55a1	Checker seat: the try's verb also replaces docker run postgres, as the controller's try did (ADR 0547 §10, issue 774)	2026-10-28 21:54:04 +01:00
jschoubben	0062bdc4a6	buscompose: the assigner may read the controller's lease, to choose where grants are read from (issue 774)	2026-10-28 21:54:04 +01:00
jschoubben	a1a688b19e	delivery: the grants part's grant keys and the source the assigner reads (a1; issue 774) ... Why: the grants part writes grants.<module>.<fp> in shadow beside the controller's; the assigner switches source only when the lease is handed away.	2026-10-28 21:54:04 +01:00
jschoubben	54b17164ef	Checker seat test: fold into the closed-set seats test, no new test function (issue 774)	2026-10-28 21:54:04 +01:00
jschoubben	3ed9a0e342	Checker seat: the try's end by hand is a verb too (issue 774)	2026-10-28 21:54:04 +01:00
jschoubben	9b5657a3d6	Seat mesh-delivery-checker: the try and its read are verbs of the checker's own seat, replacing sh merge-check.sh (ADR 0547 §10, issue 774)	2026-10-28 21:54:04 +01:00
jschoubben	1d4637e46b	Name the vault's verb issue-account on its seat, so its holder may serve it (issue 774, ADR 0561 §9)	2026-10-28 21:54:04 +01:00
jschoubben	fefa8b88ea	Say when the lease is handed away, let the vault and the grants part read it, and let the grants part create the consumers an account needs, so both turn on at the lease write alone (issue 774, ADR 0561 §3, §6)	2026-10-28 21:54:04 +01:00
jschoubben	8d9b3f779d	Build a minted account's value as the controller does, byte for byte, so a runtime reads the vault's unchanged (issue 774, ADR 0561 §2)	2026-10-28 21:54:04 +01:00
jschoubben	da506bb3b8	Say which bus accounts the grants part wants, in a state only the vault reads, and what the vault says when it mints one, so the vault can mint from the grants part's word (issue 774, ADR 0561 §2)	2026-10-28 21:54:04 +01:00
mesh-tools	af08be36a2	Merge pull request 'A waiting ask hears its step's end even when its own watch goes deaf (four lost checks, 2026-10-28)' (#121) from fix/lost-check into main	2026-10-28 20:40:58 +00:00
jschoubben	f91340fe82	buildrun: open a steps watch again that closed having heard nothing, up to 3 closes in a row ... A watch that closed at once was left for good, so an ask whose own watch went deaf was read only at a reconnect (review of fix/lost-check).	2026-10-28 20:35:02 +01:00
jschoubben	6aeb401095	buildrun: read an ask's step at every step end of its build module, so a deaf watch loses no end ... mesh-catalog #553's verdict stayed running after its step passed on shanks at 19:09:31Z on 2026-10-28: the watch of that one step key, opened at 18:46:05Z, heard neither the start nor the end and never closed. HeardEnds stands between Asker and each ask's watch: nudged at each step end of the same build module (HearEnds: one watch per steps state) and at a reconnect, every waited ask reads its keys now; a watch that closes is opened again, at most 3 times. The checker and the builder both wait through it. Tests: a section of the asker's test (deaf, nudged by another module and by its own, a watch that closes); counts unchanged.	2026-10-28 20:29:30 +01:00
jschoubben	5228a5782d	Name the modules the mesh provides itself in one predicate, so the seed's check takes the private network as the composer and the grants part do (issue 1126)	2026-10-28 20:12:51 +01:00
jschoubben	9e5666b4d6	Settings watch: arm again when the kernel drops it (IN_IGNORED), said once; the test waits on the arm, not a sleep	2026-10-28 20:08:21 +01:00
jschoubben	c006aa8242	Build puller: wake on a settings file write, retry a failed config follow at the next event, say a capacity of 0 and why	2026-10-28 20:01:46 +01:00
jschoubben	38dbe1d3a3	Let a node agent hear the creation of the seat's placement and candidates, so it binds them with no timer (ADR 0567 §9, issue 1126)	2026-10-28 18:47:13 +01:00
jschoubben	a2dbcf670b	Bound a proposal's answers and ask by pulse keys whose expiry the holder hears, and name a hand-back proposal, so no timer waits (ADR 0567 §4, §7, issue 1126)	2026-10-28 18:43:39 +01:00
jschoubben	e987a8280b	Let a module's config values be proposed before the lease write: only a layer's places and accesses wait (ADR 0567 §13, issue 1126)	2026-10-28 18:42:05 +01:00
jschoubben	45f5f76811	Keep the placement ask among the assigner's asks: its Approve's level, not its kind, needs the proof (ADR 0567 §5, issue 1126)	2026-10-28 18:30:00 +01:00
jschoubben	4b4a173d84	Let withdraw mark a proposal for its holder to end, since the holder's process alone says the seat's events (ADR 0567 §2, issue 1126)	2026-10-28 18:21:59 +01:00
jschoubben	0282229fd9	Name the placement ask and a proposal's again and warrant, so the holder asks through the teller as its other asks (ADR 0567 §5, §10, issue 1126)	2026-10-28 18:20:27 +01:00
jschoubben	5a2a7eebfd	Hold that a check's node names reach the digest tool too, so a kept verdict misses when they change (ADR 0567 §12, issue 1126)	2026-10-28 18:17:08 +01:00
jschoubben	004bbc2ce2	Carry every node's name on a check ask to the names check, so no repository lists them (ADR 0567 §12, issue 1126)	2026-10-28 18:13:57 +01:00
jschoubben	fed64292f0	Read build capacity as an integer and build hours as one window, default 0: no repository names a node (ADR 0567 §12, issue 1126)	2026-10-28 18:13:18 +01:00
jschoubben	7a82384e21	Grant a node's agent the seat's placement and candidates, so it composes from the seat's state (ADR 0567 §3, §9, issue 1126)	2026-10-28 18:12:09 +01:00
jschoubben	7c565f2aa5	Move Intended and JudgeAnswers into mesh-sdk for a proposal: a difference is shown, only a refusal or silence fails (ADR 0567 §4, issue 1126)	2026-10-28 18:11:18 +01:00
jschoubben	edc6f269f3	Name the seat's states, candidates by proposal and the proposal itself, so readers and the holder share one contract (ADR 0567 §1-§6, issue 1126)	2026-10-28 18:09:38 +01:00